$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json) Hash identifier: 0y4jJWdnSBJ+f2VKU0YzbKPB0uzmo7fLnswYB1OWLYA= Subject key identifier: 80:10:9F:C6:EC:FE:D0:CE:E5:5A:44:03:45:9E:D6:C6:80:6F:38:56 Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft Manifest number: 0739 Signing time: Fri 22 Aug 2025 21:54:21 +0000 Manifest this update: Fri 22 Aug 2025 21:54:21 +0000 Manifest next update: Fri 29 Aug 2025 21:54:21 +0000 Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: hVBK4LLIpQ2EMH9cI0EIVZCKSfOcA9MyuJT1r6qXJ/c=) 2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: WhAEh4S3tK527emBBM2jGEQwQFEHNqJyzLHLvoZ2c44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Validity Not Before: Aug 22 21:54:21 2025 GMT Not After : Aug 29 21:54:21 2025 GMT Subject: CN=68a8e70d-6635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:67:5d:ea:d7:d6:2e:c7:4f:db:62:00:5d:d1: 8b:8b:11:84:8c:d8:24:b3:86:5d:e9:d5:1a:68:a4: 9b:55:6e:4f:26:fe:6c:86:de:b3:12:ec:74:bd:c4: b0:2a:cf:c9:bd:b8:13:fb:99:c2:48:83:26:c2:87: fa:3c:ef:97:15:47:f5:e9:45:56:3c:72:bb:9e:d4: 26:93:cb:10:6e:92:b7:04:c2:d6:f0:f0:a8:2f:7f: 99:15:23:0c:d2:5b:90:d0:3f:90:53:b8:c8:d0:7d: 0a:dd:22:a3:b9:ad:df:02:f7:2b:3f:4d:04:6a:d5: 62:f5:c7:d0:d4:8a:65:d7:0d:57:a7:6e:0f:8a:9d: 47:be:6c:e8:c6:9a:bc:e1:2e:73:0e:91:82:dc:f8: 3f:30:33:b7:a7:01:e1:d9:0d:0c:6d:68:85:c4:c1: 8d:7f:fc:d3:9a:c0:fc:1f:1d:a7:5d:9e:4b:ca:ae: fc:52:a0:45:ab:a4:cb:8c:c6:80:57:f1:55:a9:47: 30:dd:c3:3b:9c:bb:27:6a:97:17:b1:0f:53:de:a8: fd:63:55:08:e9:19:0f:6e:07:1c:42:69:87:43:22: 96:98:08:be:fa:3e:a4:d3:c9:95:67:b2:e0:92:3e: 25:5c:f2:1d:07:94:f2:8c:5e:f3:1a:bc:dd:c5:af: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:10:9F:C6:EC:FE:D0:CE:E5:5A:44:03:45:9E:D6:C6:80:6F:38:56 X509v3 Authority Key Identifier: keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2c:a5:69:33:90:2a:47:5a:3e:27:31:4c:4d:02:7f:e4:f0: 7d:f7:0d:05:08:1b:7c:7e:66:0d:86:0e:ef:05:58:1b:12:5d: 39:d1:2c:27:90:1f:20:e0:0e:b2:e3:73:62:12:89:9a:c7:02: 0c:50:c9:39:a5:e6:11:2c:65:b5:87:f3:07:90:b7:85:ec:9d: 7b:99:07:5e:41:72:4c:8d:89:79:f9:69:24:7b:0d:83:79:96: 95:32:c0:48:15:85:75:1f:3e:6b:aa:50:89:40:46:58:43:ab: e9:da:12:0c:94:c5:c8:19:c5:e8:65:1c:e2:67:81:2f:61:0d: 68:41:5d:8d:44:88:5f:83:85:c0:a9:f4:04:2d:9c:77:7f:7f: a6:1b:1e:c9:ca:5c:50:c0:6b:e2:0e:61:fa:25:c6:01:fc:ed: e0:b1:38:1a:c7:61:94:cb:8c:72:ea:eb:40:13:90:8a:23:19: 14:6a:1f:b6:21:09:8a:77:4e:32:c3:3f:e6:d1:94:53:21:b3: e7:21:97:ce:53:14:5b:d3:2e:0c:f4:1b:18:80:7e:ce:60:b9: cd:a5:ee:47:ad:37:5b:a3:2a:7f:43:44:0a:7f:2b:f7:d6:75: e9:1e:e1:95:9a:83:33:13:21:b3:ea:74:37:a3:34:56:4c:f8: e9:f5:38:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0 NzBCM0I3QTMwHhcNMjUwODIyMjE1NDIxWhcNMjUwODI5MjE1NDIxWjAYMRYwFAYD VQQDEw02OGE4ZTcwZC02NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Gdd6tfWLsdP22IAXdGLixGEjNgks4Zd6dUaaKSbVW5PJv5sht6zEux0vcSw Ks/JvbgT+5nCSIMmwof6PO+XFUf16UVWPHK7ntQmk8sQbpK3BMLW8PCoL3+ZFSMM 0luQ0D+QU7jI0H0K3SKjua3fAvcrP00EatVi9cfQ1Ipl1w1Xp24Pip1Hvmzoxpq8 4S5zDpGC3Pg/MDO3pwHh2Q0MbWiFxMGNf/zTmsD8Hx2nXZ5Lyq78UqBFq6TLjMaA V/FVqUcw3cM7nLsnapcXsQ9T3qj9Y1UI6RkPbgccQmmHQyKWmAi++j6k08mVZ7Lg kj4lXPIdB5TyjF7zGrzdxa/AowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAQn8bs /tDO5VpEA0We1saAbzhWMB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmLKVpM5AqR1o+JzFMTQJ/5PB99w0FCBt8fmYNhg7vBVgbEl050Swn kB8g4A6y43NiEomaxwIMUMk5peYRLGW1h/MHkLeF7J17mQdeQXJMjYl5+Wkkew2D eZaVMsBIFYV1Hz5rqlCJQEZYQ6vp2hIMlMXIGcXoZRziZ4EvYQ1oQV2NRIhfg4XA qfQELZx3f3+mGx7JylxQwGviDmH6JcYB/O3gsTgax2GUy4xy6utAE5CKIxkUah+2 IQmKd04ywz/m0ZRTIbPnIZfOUxRb0y4M9BsYgH7OYLnNpe5HrTdboyp/Q0QKfyv3 1nXpHuGVmoMzEyGz6nQ3ozRWTPjp9Tio -----END CERTIFICATE-----Generated at Sat Aug 23 13:17:08 2025 by rpki-client